Multiple Vulnerabilities in Microsoft Dynamics 365 Field Service Identified

First seen 12 Nov 2025, 21:25 UTC • Api.Msrc.Microsoft

•37

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

Two spoofing vulnerabilities (CVE-2025-62211 and CVE-2025-62210) have been identified in Dynamics 365 Field Service (online), allowing authorized attackers to perform spoofing via improper input neutralization during web page generation. Additionally, CVE-2025-62206 exposes sensitive information in Dynamics 365 (on-premises) to unauthorized actors over a network.

How this analysis works

Attack Flow

Continue Reading

China-Nexus APT UAT-7290 Targets South Asia Telecoms in Cyber Espionage Campaign APT28 Exploits MSHTML Zero-Day Vulnerability in Windows Data Breach at University of Phoenix Due to Oracle EBS Zero-Day Exploit Clop Hackers Exploit Oracle Zero-Day, Breaching Barts Health NHS and Dartmouth Data Cisco Secure Email Gateway Targeted by Advanced Persistent Threat Logitech Confirms Data Breach Linked to Clop Extortion Gang

Multiple Vulnerabilities in Microsoft Dynamics 365 Field Service Identified

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading